Privacy Policy

This Privacy Policy explains how Bone (“Bone,” “we,” “us”) collects, uses, shares, and protects your information when you use the Bone browser, applications, websites, and related services (the “Service”). By using the Service, you agree to this Policy.

Information we collect

Account information. When you create an account, we collect your email address and, if you sign in with Google, Apple, Microsoft, or GitHub, a unique identifier and basic profile information from that provider (such as your email) to create and secure your account.

Content you provide. Files, notes, messages, and other content you create or store in Bone, and the requests you send to AI features, so we can provide the features you use.

Payment information. If you buy a paid plan or usage, our third-party payment processor collects and processes your payment details. We do not store full card numbers; we receive limited billing information needed to manage your subscription and usage.

Usage & device data. Basic technical information such as app version, device type, IP address, and diagnostic logs, used to operate, secure, and improve the Service.

How we use information

We use information to provide and secure the Service, authenticate you, process AI requests you make, bill for paid usage, prevent fraud and abuse, comply with legal obligations, communicate with you about the Service, and improve Bone. We do not sell your personal information, and we do not use your private content to train foundation models.

Legal bases (EEA/UK)

Where the GDPR or UK GDPR applies, we process personal data on the bases of performing our contract with you, our legitimate interests in operating and securing the Service, your consent (where required), and compliance with legal obligations.

AI processing

When you use AI features, the content of your request is sent to our AI providers solely to generate a response for you. We work with providers under terms designed to protect your data and to prevent your content from being used to train their models.

How we share information

We share information only with service providers who help us run Bone (such as hosting, authentication, AI, analytics, and payment processors) under confidentiality obligations; when required by law or valid legal process; to protect the rights, property, or safety of Bone and its users; or in connection with a merger, acquisition, or sale of assets (with notice where required). We do not sell your personal information.

Cookies & similar technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings; some features may not work without them. We do not use cookies to sell your data.

Data retention & deletion

We keep your information for as long as your account is active or as needed to provide the Service and meet legal obligations. You may delete your account and associated content at any time; we will delete or de-identify your personal information except where we must retain it to comply with the law, resolve disputes, or enforce our agreements.

International data transfers

We may process and store information in the United States and other countries where we or our service providers operate. Where required, we use appropriate safeguards (such as standard contractual clauses) for cross-border transfers.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Under California’s CCPA/CPRA, you have the right to know, delete, correct, and opt out of the “sale” or “sharing” of personal information — Bone does not sell or share your personal information as those terms are defined. To exercise any right, contact us at privacy@bone.app. We will not discriminate against you for exercising your rights.

Children

Bone is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us information, contact us and we will delete it.

Security

We use administrative, technical, and physical safeguards to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to incidents.

Changes

We may update this Policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you.

Contact

Questions about privacy, or want to exercise a right? Contact us at privacy@bone.app.